CVE-2008-0984

Miro Player < 1.1 - Resource Management Error

Title source: rule

Description

The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file.

Exploits (1)

exploitdb WORKING POC

pythonlocalwindows

https://www.exploit-db.com/exploits/5498

View Code ZIP pw:eip

References (13)

[Mailing List] http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060481.html

[Vendor Advisory] http://secunia.com/advisories/29122

[Vendor Advisory] http://secunia.com/advisories/29153

[Vendor Advisory] http://secunia.com/advisories/29284

[Vendor Advisory] http://secunia.com/advisories/29766

[Various Sources] http://www.coresecurity.com/?action=item&id=2147

[Third Party Advisory] http://www.gentoo.org/security/en/glsa/glsa-200803-13.xml

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id?1019510

[Patch] http://www.videolan.org/security/sa0802.html

[Vendor Advisory] http://www.vupen.com/english/advisories/2008/0682

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/488841/100/0/threaded

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/28007

[Third Party Advisory] http://www.debian.org/security/2008/dsa-1543

Scores

EPSS 0.2719

EPSS Percentile 96.4%

Details

CWE

CWE-399

Status published

Products (2)

miro/miro_player < 1.1

videolan/vlc_media_player < 0.8.6d

Published Feb 26, 2008

Tracked Since Feb 18, 2026